Sma6200 Firmware vulnerabilities
5 known vulnerabilities in Sma6200 Firmware from SonicWall. 4 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
SMA1000: Improper Handling of Unicode Encoding
Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.
- 7.2 High severity
SMA1000: Observable Response Discrepancy
An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.
- 7.2 High severity
SMA1000: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with read-only administrator privileges to escalate privileges to primary administrator.
- 6.6 Medium severity
SonicWall SMA1000 Missing Authorization Exploited
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
- 9.8 Critical severity
SonicWall SMA1000 Appliances Deserialization Exploited
Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attack